topic Re: WSA Sizing Guide for AsyncOS 10.1.pdf in Web Security

WSA Sizing Guide for AsyncOS 10.1.pdf

phretbuzz — Tue, 09 Oct 2018 14:15:31 GMT

I have a WSA running in a child domain, domain1.domain.com. These users are migrating to the parent domain, domain.com. Can I configure the two different domains to support the migration process on a Cisco Ironport WSA?

Re: WSA Sizing Guide for AsyncOS 10.1.pdf

balaji.bandi — Tue, 09 Oct 2018 16:47:38 GMT

Still the question is not able to understand, can you explain more ?

Re: WSA Sizing Guide for AsyncOS 10.1.pdf

Handy Putra — Tue, 09 Oct 2018 23:53:03 GMT

Hi,

Are you referring to the authentication that enabled in WSA that the WSA connected to the AD server that has child domain (domain1.domain.com) and you will be migrating the AD to to parent domain?

If this understanding is correct, you can do so in the authentication realm to put the AD server that you want the WSA to connect to. The 2 AD servers (parent and child domain), and if you want WSA to know the users under those domains, you will need to have those domains to have 2 way trust to each other as pre-requisite.

So eventhough the WSA only joining to the parent domain AD server and since that AD server has 2 way trust to the child domain, therefore WSA still be able to see the users and groups on the child domain.

Hope this helps.

Regards

Handy Putra